Pages

Thursday, January 29, 2015

Prevent Logging for ARP-move logs in VLT Domains

Hello,

If you use a VLT Domain, then you will certainly see a lot of the following Messages in your Logging. %STKUNIT0-M:CP %ARPMGR-6-MAC_CHANGE: IP-4-ADDRMOVE

Station-move refers to an event where a host with an unique mac/IP combination is moved from one interface to another. ARP-move refers to an event where ARP entry for an IP address is moved from one Mac (say mac1) to another (mac2). FTOS logs such ARP move message.  
Example: %STKUNIT0-M:CP %ARPMGR-6-MAC_CHANGE: IP-4-ADDRMOVE: IP address 10.1.3.10 is moved from MAC address 00:0c:29:18:ca:3c  to MAC address 00:50:56:aa:ed:6a

So it is a normal behavior but fills your Logging File with an unnecessary number of Messages. There is no way to prevent a single type of log message (ARP) from reporting.

But as you can see above ARP-move syslog is logged with severity-level of 6 (informational). So, if you don’t want to display above ARP-move logs set the logging severity option to 5 so that only logs with severity level 5 and below will be logged.

Commands:

sw1(conf)#logging console ?

<0-7>                   Logging severity level (default = 7)
alerts                  Immediate action needed           (severity=1)
critical                Critical conditions               (severity=2)
debugging               Debugging messages                (severity=7)
emergencies             System is unusable                (severity=0)
errors                  Error conditions                  (severity=3)
informational           Informational messages            (severity=6)
notifications           Normal but significant conditions (severity=5)
warnings                Warning conditions                (severity=4)
<cr>


sw1(conf)#logging console 5     << for console line.
sw1(conf)#logging monitor 5     << for terminal line
sw1(conf)#logging history 5     << for syslog history table
sw1(conf)#logging trap 5        << for syslog

sw1(conf)#logging buffered 5    << for buffer

No comments:

Post a Comment